[CLSA-2026:1782996395] Fix CVE(s): CVE-2026-33901, CVE-2026-33908
Type:
security
Severity:
Important
Release date:
2026-07-02 12:46:53 UTC
Description:
* SECURITY UPDATE: heap buffer overflow / out-of-bounds write in the MVG decoder via a crafted image - debian/patches/CVE-2026-33901.patch: cap the length of a push gradient / pattern / clip-path block before it is copied into the token buffer in DrawImage() in magick/draw.c - CVE-2026-33901 * SECURITY UPDATE: stack exhaustion (denial of service) from unbounded recursion when destroying a deeply nested XML tree - debian/patches/CVE-2026-33908.patch: thread a recursion depth through DestroyXMLTree() and raise a fatal error past MagickMaxRecursionDepth in magick/xml-tree.c - CVE-2026-33908
CVEs fixed:
Updated packages:
  • imagemagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:30c6b947e86a4e3fc3d10a5d118dfcebe405d6a7
  • imagemagick-6-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:a3f36cc5eb8ed38350464cae5cf2f980277955dd
  • imagemagick-6-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:557e4779f37fdb14b485b5927a505dffc1597f90
  • imagemagick-6.q16_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:14e97f85d79a1171e717273eaa453e820eaff3f5
  • imagemagick-6.q16hdri_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:b58b77ce1a70e0e89b0c2d7a0b5715979d6430cf
  • imagemagick-common_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:520746c970dcceeb1e88ffb0167c861657d88734
  • imagemagick-doc_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:6496baea99d03798f8207443427d243b69a33bb2
  • libimage-magick-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:5839949ded0a356ce0594557861bb51c72d02103
  • libimage-magick-q16-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:48daa31cb6e8dddf35a48dcdf2d59447e5728b4f
  • libimage-magick-q16hdri-perl_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:04a07e62433748d54a5f36e125b11082663e5fc8
  • libmagick++-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:76030558b322f22fafe0d37139d7ba6f712687cc
  • libmagick++-6.q16-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:31ae786de2cf1964d09626afede3746b103eb2f7
  • libmagick++-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:6a7c601b0794de9e415798fa4e2aacbe9db841ec
  • libmagick++-6.q16hdri-7_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:695fcc2cd06047a62920e8aa1ee398168f18f13b
  • libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:4aa50ad002aed4bf24cc46e3ef0be5c8b54a0518
  • libmagick++-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:1bd0d04bed31704740c97a63f2e0c26f8d44d114
  • libmagickcore-6-arch-config_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:9d30df5d162a4487edc5cf77875c565a53ba8381
  • libmagickcore-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:1b3fe5bd9077eaf9d1affd02bdc49849ce54e4b8
  • libmagickcore-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:6f041864d18a3986cbe17af4fda3605c77427ca2
  • libmagickcore-6.q16-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:2472245eb16f5b6d32d93df01ff954e9849c48e0
  • libmagickcore-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:472a21018261f8edd8a80efdc11762b9f21e8ceb
  • libmagickcore-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:e2d49bd2e7690334da8720b8a03877628d628d90
  • libmagickcore-6.q16hdri-3-extra_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:882cb8abfd9d3d4e76db84a959db7727444ac492
  • libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:d87d01aa65d48e2ea27debae189097788796ee8e
  • libmagickcore-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:000b9f003ac4a52bb68d1b7374e06d21a4d6b39e
  • libmagickwand-6-headers_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:8327b41a30b52c7d6df554abce88101fede0e867
  • libmagickwand-6.q16-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:6b12376127aa229f8fefbbffdaa5a609f770bee0
  • libmagickwand-6.q16-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:0afcb3bdeeac235ee054b4394eb4e19060acdf1a
  • libmagickwand-6.q16hdri-3_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:7bd92b7614580551558cdfe9a9752d7146393322
  • libmagickwand-6.q16hdri-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_amd64.deb
    sha:36b17311e687059023201f8940db56fe672ff5b0
  • libmagickwand-dev_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:4cfcc97a6606e9534600bc4be75121e32f4481d9
  • perlmagick_6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els39_all.deb
    sha:8aa0981cdc330c55742fb080dbdcc12ed795109d
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.